Static task
static1
Behavioral task
behavioral1
Sample
71361965125da5dcbd778bfd549c89edda3de9f685e066d91dc2c8d8ab8d0c23.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
71361965125da5dcbd778bfd549c89edda3de9f685e066d91dc2c8d8ab8d0c23.exe
Resource
win10v2004-20220901-en
General
-
Target
71361965125da5dcbd778bfd549c89edda3de9f685e066d91dc2c8d8ab8d0c23
-
Size
822KB
-
MD5
634b4f1d205dee022128674571cc3120
-
SHA1
f1d45ef81da334098ede660fe268fe9aac101333
-
SHA256
71361965125da5dcbd778bfd549c89edda3de9f685e066d91dc2c8d8ab8d0c23
-
SHA512
4fc5f4e6ba553397806d0178630f25eb12aa5ed7752adae722174275524dbe7c8d8c68b414b7b368236dcf32b7ee03222b3f906d5fd3a48c019e11ffbcc2f8da
-
SSDEEP
24576:XRIwEv0WdCN/13ieRHDz/DixeZTrHm+HwGKw:mwMq0mzrixeZTbm+1
Malware Config
Signatures
Files
-
71361965125da5dcbd778bfd549c89edda3de9f685e066d91dc2c8d8ab8d0c23.exe windows x86
a6b3bb6223a939cbca490565dd2294b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadStringPtrW
GetCurrentDirectoryW
GetDriveTypeW
FindResourceA
GetDriveTypeW
GetModuleFileNameW
GetDriveTypeW
lstrlenA
GetDriveTypeW
GetVolumeInformationA
GetDriveTypeW
VirtualAlloc
GetModuleHandleA
GetDriveTypeW
DeleteFileW
GetDriveTypeW
GetFileSize
msxml3
DllRegisterServer
DllMain
DllGetClassObject
DllCanUnloadNow
Sections
.play Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.edata Size: 801KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ